check-advisories Github Action fails due to unmaintained `instant` crate.

[andriyDev]

Bevy version

6741e01

What you did

• Ran cargo deny check advisories (same thing as the Github Action).

What went wrong

error[unmaintained]: `instant` is unmaintained
    ┌─ E:\Content\bevy/Cargo.lock:293:1
    │
293 │ instant 0.1.13 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2024-0384
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0384
    ├ This crate is no longer maintained, and the author recommends using the maintained [`web-time`] crate instead.

      [`web-time`]: https://crates.io/crates/web-time
    ├ Solution: No safe upgrade is available!
    ├ instant v0.1.13
      └── notify-types v1.0.0
          ├── notify v7.0.0
          │   └── notify-debouncer-full v0.4.0
          │       └── bevy_asset v0.15.0-dev
          │           ├── bevy_animation v0.15.0-dev
          │           │   ├── bevy_gltf v0.15.0-dev
          │           │   │   └── bevy_internal v0.15.0-dev
          │           │   │       ├── bevy v0.15.0-dev
          │           │   │       └── bevy_dylib v0.15.0-dev
          │           │   │           └── bevy v0.15.0-dev (*)
          │           │   └── bevy_internal v0.15.0-dev (*)
          │           ├── bevy_audio v0.15.0-dev
          │           │   └── bevy_internal v0.15.0-dev (*)
          │           ├── bevy_core_pipeline v0.15.0-dev
          │           │   ├── bevy_dev_tools v0.15.0-dev
          │           │   │   └── bevy_internal v0.15.0-dev (*)
          │           │   ├── bevy_gizmos v0.15.0-dev
          │           │   │   ├── bevy_dev_tools v0.15.0-dev (*)
          │           │   │   └── bevy_internal v0.15.0-dev (*)
          │           │   ├── bevy_gltf v0.15.0-dev (*)
          │           │   ├── bevy_internal v0.15.0-dev (*)
          │           │   ├── bevy_pbr v0.15.0-dev
          │           │   │   ├── bevy_gizmos v0.15.0-dev (*)
          │           │   │   ├── bevy_gltf v0.15.0-dev (*)
          │           │   │   └── bevy_internal v0.15.0-dev (*)
          │           │   ├── bevy_sprite v0.15.0-dev
          │           │   │   ├── bevy_gizmos v0.15.0-dev (*)
          │           │   │   ├── bevy_internal v0.15.0-dev (*)
          │           │   │   ├── bevy_text v0.15.0-dev
          │           │   │   │   ├── bevy_dev_tools v0.15.0-dev (*)
          │           │   │   │   ├── bevy_internal v0.15.0-dev (*)
          │           │   │   │   └── bevy_ui v0.15.0-dev
          │           │   │   │       ├── bevy_dev_tools v0.15.0-dev (*)
          │           │   │   │       └── bevy_internal v0.15.0-dev (*)
          │           │   │   └── bevy_ui v0.15.0-dev (*)
          │           │   └── bevy_ui v0.15.0-dev (*)
          │           ├── bevy_dev_tools v0.15.0-dev (*)
          │           ├── bevy_gizmos v0.15.0-dev (*)
          │           ├── bevy_gltf v0.15.0-dev (*)
          │           ├── bevy_image v0.15.0-dev
          │           │   ├── bevy_core_pipeline v0.15.0-dev (*)
          │           │   ├── bevy_gizmos v0.15.0-dev (*)
          │           │   ├── bevy_gltf v0.15.0-dev (*)
          │           │   ├── bevy_internal v0.15.0-dev (*)
          │           │   ├── bevy_mesh v0.15.0-dev
          │           │   │   ├── bevy_picking v0.15.0-dev
          │           │   │   │   ├── bevy_internal v0.15.0-dev (*)
          │           │   │   │   ├── bevy_sprite v0.15.0-dev (*)
          │           │   │   │   └── bevy_ui v0.15.0-dev (*)
          │           │   │   └── bevy_render v0.15.0-dev
          │           │   │       ├── (dev) bevy v0.15.0-dev (*)
          │           │   │       ├── bevy_animation v0.15.0-dev (*)
          │           │   │       ├── bevy_core_pipeline v0.15.0-dev (*)
          │           │   │       ├── bevy_dev_tools v0.15.0-dev (*)
          │           │   │       ├── bevy_gizmos v0.15.0-dev (*)
          │           │   │       ├── bevy_gltf v0.15.0-dev (*)
          │           │   │       ├── bevy_internal v0.15.0-dev (*)
          │           │   │       ├── bevy_pbr v0.15.0-dev (*)
          │           │   │       ├── bevy_picking v0.15.0-dev (*)
          │           │   │       ├── bevy_scene v0.15.0-dev
          │           │   │       │   ├── bevy_gltf v0.15.0-dev (*)
          │           │   │       │   └── bevy_internal v0.15.0-dev (*)
          │           │   │       ├── bevy_sprite v0.15.0-dev (*)
          │           │   │       ├── bevy_text v0.15.0-dev (*)
          │           │   │       └── bevy_ui v0.15.0-dev (*)
          │           │   ├── bevy_pbr v0.15.0-dev (*)
          │           │   ├── bevy_render v0.15.0-dev (*)
          │           │   ├── bevy_sprite v0.15.0-dev (*)
          │           │   ├── bevy_text v0.15.0-dev (*)
          │           │   ├── bevy_ui v0.15.0-dev (*)
          │           │   └── bevy_winit v0.15.0-dev
          │           │       └── bevy_internal v0.15.0-dev (*)
          │           ├── bevy_internal v0.15.0-dev (*)
          │           ├── bevy_mesh v0.15.0-dev (*)
          │           ├── bevy_pbr v0.15.0-dev (*)
          │           ├── bevy_picking v0.15.0-dev (*)
          │           ├── bevy_render v0.15.0-dev (*)
          │           ├── bevy_scene v0.15.0-dev (*)
          │           ├── bevy_sprite v0.15.0-dev (*)
          │           ├── bevy_text v0.15.0-dev (*)
          │           ├── bevy_ui v0.15.0-dev (*)
          │           └── bevy_winit v0.15.0-dev (*)
          └── notify-debouncer-full v0.4.0 (*)

advisories FAILED

[andriyDev]

This is fixed upstream notify-rs/notify#652, so I guess we just have to twiddle our thumbs until notify-types 2.0 gets published.

[BenjaminBrienen]

Yeah, this is just a transitive dependency, so it won't be fixable until a they finally publish a new version.

[BD103]

#16763 will temporarily silence this CI failure, but the workaround it introduces should be removed before this issue is closed.